Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
File: ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json)
Hash identifier: RNIb17tII8LZR/9S031I8YRT+qsiY1u3l3xASW0z+XM=
Subject key identifier: C9:38:8E:22:CB:BF:73:45:CD:DF:9E:9D:4D:3C:2E:05:75:3D:41:3E
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 01995EA0EE0A1A89AE923F8D6396FFF37B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
Manifest number: 1697
Signing time: Thu 18 Sep 2025 21:00:28 +0000
Manifest this update: Thu 18 Sep 2025 21:00:28 +0000
Manifest next update: Fri 19 Sep 2025 21:00:28 +0000
Files and hashes: 1: 02kstygB_1Q-T4WpJF1fDwmJj7Y.roa (hash: 1yQLO6zXVi4jG2bubLFyNc7MiwNkUFoEG9KeznEMEp4=)
2: 4-SKabrWOl-7KlndWPRuCU9aEhs.roa (hash: lMaT7o02aVJAelpgq3JP3XJEHgIKnGWGn47SBUcvn5g=)
3: 7Sa61R-MOh-0ZN995AyZU8ZyFSg.roa (hash: vYukMa63xBh0wU8yyQa7I0WK1kHPXukHl42Dhw+i7vg=)
4: BFpvKhELM78QLCFM7cjT2Dri-Ks.roa (hash: c09KIIz60Nm+dgzrURYFnp6FyV+tcK5Ue3poQFctk+0=)
5: EOa7r-jJgtdz4RGUmunD8B8QB9E.roa (hash: 4iOebAizMatknAk9CDhaCyLQWxnN0bfea5KmgMRwulk=)
6: K7WRjV9MYHng8NfZhIiH2_A3Swg.roa (hash: 7+t8vrSKIkcQUgESVH88zqe5BbNV7ixlCqPd3RDBnyQ=)
7: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: VhqKKXYk/KHZdKFHJEnYC5jNhIxW8ZdlrL00MYf2mZU=)
8: iJ0N88iATNc7UiUGXoHztFV1r-M.roa (hash: l8fJQFt0ipvnCwRF0O4nNX66/X32E1fs26DRKw04Vb0=)
9: ukKrQsbJYmMnCmIVGPhPmqzzI-Y.roa (hash: YP54ZYRp6pI7NTnVUT51wnLKoj40S7g2X/Zv7SQymBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 19:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5e:a0:ee:0a:1a:89:ae:92:3f:8d:63:96:ff:f3:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Sep 18 21:00:28 2025 GMT
Not After : Sep 19 21:00:28 2025 GMT
Subject: CN=c9388e22cbbf7345cddf9e9d4d3c2e05753d413e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:08:01:90:0c:bb:25:e4:f7:dc:2e:c1:fe:84:
aa:0f:5d:6d:7f:80:f8:6f:f2:54:a0:58:c1:cb:fc:
b6:70:b4:b3:94:4b:dd:6d:0b:d0:88:6b:25:fd:09:
3b:48:41:b3:c4:c1:d4:a0:bd:0e:f6:6b:6f:74:71:
e8:c6:1e:3c:eb:d2:e5:c5:31:55:4b:97:c3:e5:fc:
2d:33:81:28:89:d6:e9:5b:82:ad:39:b2:60:2c:2e:
95:b5:2b:3d:e7:3c:c5:c5:70:40:a7:45:02:45:10:
79:10:5a:b8:47:c3:7c:10:dc:cd:05:94:5e:6d:bc:
8f:27:f6:1f:2a:8d:6b:e2:44:22:3e:af:89:70:74:
9f:08:dc:19:90:98:89:30:0a:d5:ca:af:6c:37:ba:
4f:4d:4e:76:52:29:53:03:bc:74:0d:67:2d:a3:85:
a6:4f:45:c4:19:7d:0a:8d:6d:fd:8f:26:1f:23:c3:
94:05:2a:fb:16:a2:8f:df:1e:b0:4d:2a:ca:45:57:
82:b5:b6:28:cb:c1:24:2b:c9:49:84:ee:84:1e:88:
92:ae:bb:76:5b:5d:f6:29:fb:95:d9:b8:21:68:6c:
c0:95:18:29:40:f8:46:b7:aa:58:f6:2d:e4:d1:a0:
48:c3:77:b0:a0:d8:81:7f:dc:6e:64:c4:8d:79:8c:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:38:8E:22:CB:BF:73:45:CD:DF:9E:9D:4D:3C:2E:05:75:3D:41:3E
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f9:0b:41:39:3f:7a:44:a0:6f:ce:df:5e:75:4e:eb:1c:73:
05:9b:e8:f1:15:6d:d8:68:4d:e8:eb:b5:f0:84:08:4e:fb:f1:
d1:b7:1f:47:93:16:bf:d4:8f:b1:d4:5e:55:93:3d:0f:3d:86:
d8:b7:0d:bb:15:06:80:b9:bc:77:f3:4d:98:93:be:6a:61:e2:
05:f2:58:e1:eb:50:22:9c:d0:cf:79:73:34:0c:fd:74:23:e5:
74:e7:40:24:4d:10:8c:6b:ec:b7:07:ea:e2:a4:d0:b0:1f:bd:
90:e4:a1:00:39:03:4a:3a:22:f9:9c:6f:76:cd:22:2d:d5:5b:
c6:09:1e:54:f7:1a:4e:01:99:9d:64:69:ca:41:c1:be:25:7f:
ad:93:7a:17:b1:2a:42:94:d6:2f:2a:fc:6d:26:81:21:85:f6:
8f:91:b4:7c:b2:43:56:61:34:0d:57:95:fe:3c:10:fc:df:4a:
04:8e:58:38:19:a1:d2:b2:29:f4:e1:c6:80:55:c1:92:98:2d:
32:64:13:36:9e:b0:ad:c6:6f:97:02:04:9e:e9:f6:84:35:39:
c8:1e:6f:60:12:2e:0c:40:61:46:d6:a1:12:85:67:e0:64:70:
dd:da:48:be:47:98:57:c2:de:6a:e7:4c:d3:ec:47:3f:df:43:
4a:b4:ff:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:34:56 2025 by rpki-client